Discussion of security features and sandboxing mechanisms in OpenBSD, including pledge() and unveil(), and their application in Firefox's multi-process architecture.